Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
File:                     3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          STWJgizYfSvXoLc0xVLeX1S33lyCdFxHmoUznReSgcg=
Subject key identifier:   D3:9C:AF:2C:A7:CF:7D:B9:E8:44:0F:81:55:8A:45:93:69:28:80:65
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       3067462585D010001C7D1C3E2A68AA4237E6DDE7
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     138995
IP address blocks:        103.208.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:67:46:25:85:d0:10:00:1c:7d:1c:3e:2a:68:aa:42:37:e6:dd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=D39CAF2CA7CF7DB9E8440F81558A459369288065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:e1:9a:3f:8a:b0:3e:0d:fc:da:22:b4:d4:
                    50:8f:28:3b:b5:be:1c:7c:27:1f:cb:42:6c:92:b4:
                    bb:96:e0:8b:90:58:a7:c6:47:b1:b4:97:37:fd:3f:
                    01:cd:68:4a:69:da:f5:10:6f:65:e9:df:25:ac:f7:
                    e0:0c:c2:05:6b:88:70:bc:9d:95:91:d6:c3:c6:2e:
                    c8:f8:f2:ac:37:81:84:b5:06:cf:ae:ff:16:a9:be:
                    33:7e:c4:fc:9f:4b:11:9a:70:39:a8:f9:44:9d:06:
                    f1:9c:55:b8:74:09:b9:5d:ee:7d:76:d0:17:94:85:
                    59:85:e1:97:8c:b2:ff:d6:e8:45:03:49:03:bd:1e:
                    e6:e7:44:68:9f:88:d2:b6:25:f9:eb:b5:30:d8:7d:
                    c7:5c:d2:48:9d:f0:7b:25:5d:39:33:3d:00:d1:67:
                    ac:08:bd:cf:83:cc:ac:1e:70:df:40:7c:b1:77:97:
                    28:95:a3:7a:08:da:bd:d9:d8:56:9b:14:86:57:59:
                    63:2c:e6:52:1b:bf:71:6b:62:d8:c7:a5:77:63:4e:
                    6a:d5:9d:a4:dd:bc:72:d7:a3:59:85:c8:60:df:e8:
                    cd:ca:56:e9:b2:ea:85:e5:4a:39:b7:c0:54:01:a2:
                    d4:95:a4:8d:92:f9:fe:16:d5:89:0b:ba:64:67:1f:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9C:AF:2C:A7:CF:7D:B9:E8:44:0F:81:55:8A:45:93:69:28:80:65
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:c5:b0:13:7b:99:7c:13:5e:59:aa:c3:83:a6:80:71:90:2e:
         93:8d:69:9b:e0:ae:0f:e1:3e:61:c6:e2:de:72:66:d2:f0:e8:
         e4:78:17:89:96:8c:a3:22:22:1a:fa:05:2f:48:0d:2b:d0:9a:
         41:6a:e3:69:ea:3b:82:63:1a:6b:84:66:b3:01:da:bc:95:f8:
         2f:dd:cf:a1:13:ec:13:37:b6:99:16:fd:94:db:a4:f9:a6:8b:
         ff:44:15:52:1d:b0:3e:2f:60:bb:c0:8f:e7:01:57:04:fe:74:
         a3:84:bd:66:a1:a9:21:87:f2:0e:62:fd:a3:a3:f3:54:c7:0b:
         00:bb:91:7b:ed:8d:50:73:d3:2f:3d:81:78:5f:57:ae:90:76:
         2a:53:19:2d:d2:be:07:56:d4:8b:d1:72:f5:ca:68:8e:28:05:
         a4:11:d5:db:58:25:c1:04:83:1b:3d:46:d1:87:cc:ca:0f:ab:
         9e:a1:40:e7:0d:71:3f:6f:2f:e1:7f:9f:bc:e2:0e:10:4f:3b:
         71:33:d9:62:9a:b4:a7:3a:13:6a:1a:7b:d0:95:f3:c2:22:8b:
         f4:b0:f1:54:e6:03:5e:10:d6:fc:62:12:73:a0:98:e6:7a:ae:
         c4:ca:96:73:02:62:31:fe:89:50:d2:1c:fc:18:65:ca:ec:22:
         d3:68:52:48
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUMGdGJYXQEAAcfRw+KmiqQjfm3ecwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTI0MTEwNTAzMzUxMVoX
DTI1MTEwNDAzNDAxMVowMzExMC8GA1UEAxMoRDM5Q0FGMkNBN0NGN0RCOUU4NDQw
RjgxNTU4QTQ1OTM2OTI4ODA2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMCC4Zo/irA+DfzaIrTUUI8oO7W+HHwnH8tCbJK0u5bgi5BYp8ZHsbSXN/0/
Ac1oSmna9RBvZenfJaz34AzCBWuIcLydlZHWw8YuyPjyrDeBhLUGz67/Fqm+M37E
/J9LEZpwOaj5RJ0G8ZxVuHQJuV3ufXbQF5SFWYXhl4yy/9boRQNJA70e5udEaJ+I
0rYl+eu1MNh9x1zSSJ3weyVdOTM9ANFnrAi9z4PMrB5w30B8sXeXKJWjegjavdnY
VpsUhldZYyzmUhu/cWti2Meld2NOatWdpN28ctejWYXIYN/ozcpW6bLqheVKObfA
VAGi1JWkjZL5/hbViQu6ZGcfG4ECAwEAAaOCAj4wggI6MB0GA1UdDgQWBBTTnK8s
p899uehED4FVikWTaSiAZTAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzIzMDM4MmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzMzM4MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9BXMA0GCSqGSIb3DQEBCwUAA4IBAQDO
xbATe5l8E15ZqsODpoBxkC6TjWmb4K4P4T5hxuLecmbS8OjkeBeJloyjIiIa+gUv
SA0r0JpBauNp6juCYxprhGazAdq8lfgv3c+hE+wTN7aZFv2U26T5pov/RBVSHbA+
L2C7wI/nAVcE/nSjhL1moakhh/IOYv2jo/NUxwsAu5F77Y1Qc9MvPYF4X1eukHYq
Uxkt0r4HVtSL0XL1ymiOKAWkEdXbWCXBBIMbPUbRh8zKD6ueoUDnDXE/by/hf5+8
4g4QTztxM9limrSnOhNqGnvQlfPCIov0sPFU5gNeENb8YhJzoJjmeq7EypZzAmIx
/olQ0hz8GGXK7CLTaFJI
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:22 2024 by rpki-client on console-ams.rpki-client.org